Google Chrome Omnibox Domain Spoofing Vulnerability on Android

A domain spoofing vulnerability has been identified in the Omnibox component of Google Chrome for Android, affecting versions prior to 141.0.7390.54. This vulnerability allows remote attackers to manipulate domain representation by convincing users to perform specific user interface gestures on a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to domain spoofing, where a malicious actor can deceive users about the true nature of a website or web resource.

Remediation

Users can update to Google Chrome version 141.0.7390.54 or later to address this vulnerability.